Senior Information Security Engineer

Senior Information Security Engineer

Hybrid Tampa, FL

We are seeking a senior-level, high-impact Information Security Engineer to help scale and mature a modern, cloud-first security program.This is not a narrow or siloed role. You will operate across cloud security, vulnerability management, automation, compliance, and workforce security. You will report directly to the CISO and have visibility into—and influence over—the organization's entire security posture.

Our environment is AWS and SaaS-centric, supporting a modern, macOS-heavy workforce. We are looking for someone who thrives in ownership, moves decisively, and understands how to balance security rigor with business velocity.

This role is for a builder, operator, and problem-solver.

What You’ll Do:

• Own end-to-end security operations: monitoring, investigation, and response across AWS, SaaS, and endpoint environments. 
• Lead incident response from triage to root cause and executive reporting. 
• Design and refine operational playbooks. 
• Secure AWS using Wiz and native controls, proactively addressing misconfigurations and identity risks. 
• Continuously assess cloud posture and drive remediation with Cloud Engineering, embedding secure-by-design principles. 
• Own the vulnerability management lifecycle (Tenable), translating data into business risk decisions and driving architectural improvements. 
• Manage and optimize endpoint detection and response (CrowdStrike). 
• Oversee identity and access control validation, including quarterly reviews and least-privilege enforcement. 
• Lead phishing simulations and security awareness. 
• Build automation and response workflows with Torq to accelerate remediation. 
• Continuously evaluate and optimize the security stack; identify bottlenecks and engineer scalable solutions. 
• Maintain and mature compliance (ISO 27001, SOC 2, PCI-DSS) using Drata for continuous monitoring and audit readiness. 
• Conduct control testing (CIS Benchmarks, MITRE ATT&CK). 
• Support risk assessments and security evaluations. 
• Act as a security advisor to IT, Engineering, and business leadership, providing risk-informed guidance and helping shape the security program roadmap.

What You Bring:

• 5+ years of progressive experience in Information Security, Cloud Security, or Security Operations.
• Strong hands-on experience with modern security tooling, including Splunk, Wiz, Tenable, CrowdStrike, Torq, and Drata.
• Proven experience securing AWS and SaaS-based environments.
• Experience operating within regulated environments (ISO 27001, SOC 2, PCI-DSS).
• Familiarity with CIS Benchmarks, MITRE ATT&CK, and modern security architecture principles.
• Ability to independently prioritize, execute, and drive outcomes across multiple domains.
• Clear communication skills with the ability to translate technical risk to business stakeholders.
• High integrity, strong ownership mindset, and a bias toward action.

Certifications such as CISSP, CCSP, Security+, AWS Security Specialty, or similar are a plus but not required.

Why This Role:This is a high-visibility role with direct executive exposure and meaningful influence. You will not be confined to a single domain — you will operate across the full security spectrum and directly shape how security scales with the business. If you are looking for ownership, autonomy, and the opportunity to build — not just maintain — a security program, this role offers exactly that. High visibility. High ownership. High impact.

Statutory Pay Disclosure:

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States; 
• A person admitted to the United States as a refugee; or
• A person that has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon offer of employment.